In Nikto 2.1.1, the facillity to call only specific plugins was added. This was mainly designed as a debugging and development feature so that it is easier to test one plugin without running all of the tests. This was a very simple plugin string that consisted of a simple comma separated list of plugin names.

In Nikto 2.1.2 it was discovered that this facillity was of more use than previously thought and could fix one of the basic flaws with the current plugin system: that of passing parameters to the plugin, something that had been hacked via using -mutate-options.

Jabra, author of Nikto's XML output format, has just released Nikto::Parser (along with several other security tool parsers). This perl module takes in a Nikto XML file (or runs Nikto directly) and creates an easily accessible interface to the data.

I've decided to stop procrastinating and put the final polish on the next version of Nikto and aim for a mid-July release date.

This is the last chance to guide the remaining tasks I have left. If you want some super great feature or needed bug fix in the next version, head over to assembla (http://trac2.assembla.com/Nikto_2) and raise a ticket, post on the discussion list or send me an email.